Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: NlMlUJ73ynvwc+9MzJXxa+0i15+sZf+FBLJHBPlvg88=
Subject key identifier: D4:34:8B:8D:60:39:D4:DB:98:21:B5:AB:BD:DA:6D:45:A9:86:CC:B6
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 01964D7DE7EE276DF7E009261437BAC05E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 05CA
Signing time: Sat 19 Apr 2025 10:00:19 +0000
Manifest this update: Sat 19 Apr 2025 10:00:19 +0000
Manifest next update: Sun 20 Apr 2025 10:00:19 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: vlDEHl4gzchLuqgGfqQJibazQ+iR6Z6x2RwR2etG1e4=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:e7:ee:27:6d:f7:e0:09:26:14:37:ba:c0:5e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Apr 19 10:00:19 2025 GMT
Not After : Apr 20 10:00:19 2025 GMT
Subject: CN=d4348b8d6039d4db9821b5abbdda6d45a986ccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:e6:7f:2a:68:85:13:39:ed:47:36:1e:f6:
52:67:be:79:d9:8f:66:dc:26:80:96:a8:bc:86:4b:
a7:4a:02:5b:78:10:fb:b5:a7:1b:94:97:f0:33:b4:
e8:f7:5b:2d:1a:52:ab:bc:93:df:81:31:e4:56:5e:
02:ee:06:9b:ad:b3:cc:41:64:3f:f8:8e:56:44:68:
dc:86:4b:0d:58:d4:bd:79:b2:0c:b4:29:11:bd:6f:
8e:71:37:fc:83:ee:f1:ef:77:80:58:9e:6d:3c:3d:
15:ec:9c:17:d8:59:81:ae:98:3e:1b:4b:64:ce:ea:
36:6e:62:b1:17:fb:95:11:99:0a:2e:01:0c:71:ce:
05:98:95:90:5f:86:fb:a3:37:85:4f:8e:54:a8:5f:
2b:8c:4e:1e:76:fb:05:23:a0:55:d5:e8:f2:82:df:
8f:f2:b8:5a:2d:02:a7:c9:ed:5f:0e:76:b6:dc:1c:
60:f6:b7:f1:1c:02:d9:45:c6:be:c0:94:5c:bb:3b:
3d:43:2a:57:2d:b6:e0:47:44:ee:a2:31:6b:fe:e7:
75:8e:f5:4f:f9:7d:6e:85:74:0d:b9:93:b1:8f:e7:
22:9a:77:58:03:61:bf:e2:f6:36:a3:78:82:87:1b:
a2:e7:4f:77:2c:97:4a:b6:10:44:c9:04:f4:48:7f:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:8B:8D:60:39:D4:DB:98:21:B5:AB:BD:DA:6D:45:A9:86:CC:B6
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9b:43:32:9b:b5:1b:da:a0:0e:a9:70:f2:de:d6:79:c8:b4:
32:10:76:f7:80:ae:c3:8b:2d:87:a6:3d:f1:63:b5:22:13:a4:
32:8d:70:a6:c0:61:d6:ed:d2:ac:e3:3b:6b:7d:11:de:78:ce:
06:40:a9:67:5b:55:1d:fb:0f:44:23:2c:6c:50:09:01:1e:af:
ba:ba:32:27:bd:7a:24:50:2a:fd:9d:40:f4:bf:dd:af:df:04:
d4:9d:02:7f:f5:e9:26:0d:48:fe:9c:c6:ea:4e:78:f5:8c:d2:
00:cc:b2:02:bf:a1:92:a4:d2:40:f7:bd:23:fe:12:da:a4:26:
ff:91:2e:c2:33:e4:c4:96:36:b9:2c:4a:0c:9e:f0:b6:7a:fd:
48:16:f1:14:ee:a8:17:d1:31:71:66:6c:46:fb:9d:2c:66:5b:
4a:51:12:75:ac:d2:c9:a0:32:6a:9a:cf:14:83:51:37:b4:e5:
3e:7d:62:09:75:1c:79:9f:76:8b:3b:c7:d8:35:f5:cc:7b:2d:
aa:33:e6:8d:5b:dc:d1:87:91:74:6c:36:8e:1f:35:75:58:c8:
48:0c:1a:ee:c4:1b:cd:6c:f2:da:8b:22:69:48:b6:d9:4f:f6:
7f:11:f9:df:94:da:14:19:ef:e8:56:02:92:1d:4b:86:5e:65:
61:b3:bf:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfefuJ2334AkmFDe6wF41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTQ1MTY0YzU3MmVkZGU1ZGYyNTM5MTdjYzEyYTJkZmQz
OThiOTcwHhcNMjUwNDE5MTAwMDE5WhcNMjUwNDIwMTAwMDE5WjAzMTEwLwYDVQQD
EyhkNDM0OGI4ZDYwMzlkNGRiOTgyMWI1YWJiZGRhNmQ0NWE5ODZjY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F/mfypohRM57Uc2HvZSZ7552Y9m
3CaAlqi8hkunSgJbeBD7tacblJfwM7To91stGlKrvJPfgTHkVl4C7gabrbPMQWQ/
+I5WRGjchksNWNS9ebIMtCkRvW+OcTf8g+7x73eAWJ5tPD0V7JwX2FmBrpg+G0tk
zuo2bmKxF/uVEZkKLgEMcc4FmJWQX4b7ozeFT45UqF8rjE4edvsFI6BV1ejygt+P
8rhaLQKnye1fDna23Bxg9rfxHALZRca+wJRcuzs9QypXLbbgR0TuojFr/ud1jvVP
+X1uhXQNuZOxj+cimndYA2G/4vY2o3iChxui5093LJdKthBEyQT0SH+g4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ0i41gOdTbmCG1q73abUWphsy2MB8GA1UdIwQY
MBaAFCPkUWTFcu3eXfJTkXzBKi39OYuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEt
NjZhYTJhMjMyMzllLzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEtNjZhYTJhMjMyMzll
LzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5tDMpu1
G9qgDqlw8t7Weci0MhB294Cuw4sth6Y98WO1IhOkMo1wpsBh1u3SrOM7a30R3njO
BkCpZ1tVHfsPRCMsbFAJAR6vuroyJ716JFAq/Z1A9L/dr98E1J0Cf/XpJg1I/pzG
6k549YzSAMyyAr+hkqTSQPe9I/4S2qQm/5EuwjPkxJY2uSxKDJ7wtnr9SBbxFO6o
F9ExcWZsRvudLGZbSlESdazSyaAyaprPFINRN7TlPn1iCXUceZ92izvH2DX1zHst
qjPmjVvc0YeRdGw2jh81dVjISAwa7sQbzWzy2osiaUi22U/2fxH535TaFBnv6FYC
kh1Lhl5lYbO/bg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:16 2025 by rpki-client